diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c4d2a297..dcd0d1ba 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -39,7 +39,11 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, macos-latest]
+        include:
+          - os: ubuntu-latest
+            nextest_filter: all()
+          - os: macos-latest
+            nextest_filter: not binary(live_handoff)
     runs-on: ${{ matrix.os }}
     timeout-minutes: 10
     steps:
@@ -71,4 +75,4 @@ jobs:
           cache-bin: false
 
       - name: Run checks
-        run: just ci
+        run: just ci '${{ matrix.nextest_filter }}'
diff --git a/justfile b/justfile
index 88e2a892..5ef53e1e 100644
--- a/justfile
+++ b/justfile
@@ -15,8 +15,8 @@ lint:
     cargo clippy --all-targets --locked -- -D warnings
 
 # Run PR CI checks
-ci: lint
-    cargo nextest run --locked --status-level fail --final-status-level slow --failure-output final --success-output never
+ci filter='all()': lint
+    cargo nextest run --locked -E "{{filter}}" --status-level fail --final-status-level slow --failure-output final --success-output never
 
 # Check formatting + run unit tests + maintenance script tests
 check: ci